Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F9908626FA211F09DF8F47CDAE4EC9C.roa
File: 7F9908626FA211F09DF8F47CDAE4EC9C.roa (raw, json)
Hash identifier: 4l8rS8AhQ8zOOWLQWBdVwwYFX3gOUaTOnCQjXwi/UMA=
Subject key identifier: 27:E2:D1:F4:B8:A9:64:EC:04:A2:AA:55:A6:AF:0B:BA:9E:11:41:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01903C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F9908626FA211F09DF8F47CDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 13:13:37 +0000
ROA not before: Sat 02 Aug 2025 13:13:31 +0000
ROA not after: Sun 07 Sep 2025 13:13:31 +0000
asID: 399989
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102460 (0x1903c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 13:13:31 2025 GMT
Not After : Sep 7 13:13:31 2025 GMT
Subject: CN=688e0f01-0fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:c6:a7:2b:c7:db:49:39:77:d3:60:41:5f:
62:89:c0:99:26:6f:d2:07:fb:08:81:4d:92:79:db:
f0:54:ea:8a:b0:ae:93:35:f2:e8:eb:45:3e:af:3d:
11:22:6f:98:f2:2f:69:06:75:dd:7a:81:f5:73:ee:
9e:04:07:e9:64:bf:bc:a3:59:7b:38:ff:eb:89:26:
98:25:27:11:25:c9:3d:46:c1:6c:28:e6:d8:2f:af:
17:3b:97:a3:e0:e3:c1:9d:ca:df:fe:20:fd:01:9f:
62:a7:b1:26:2c:55:af:7d:59:8d:76:07:80:0f:c0:
92:a2:30:10:f3:53:de:41:41:6f:af:b6:59:c0:e4:
7a:61:ac:03:4a:c2:9f:ee:ee:a7:b8:b5:5c:15:46:
3a:a1:8e:bc:9b:6e:13:6a:43:92:b9:f1:07:ba:eb:
eb:39:5b:1d:89:f9:a5:8c:ec:19:08:1b:b4:76:e6:
6d:15:be:cc:0c:d6:e0:b1:39:fa:99:bd:85:a2:af:
b3:14:5e:de:5a:26:d9:2c:e7:cc:cd:c9:dd:92:ad:
ec:76:06:a3:23:ac:f4:7f:69:95:a6:5a:8a:8b:c4:
ab:3f:84:b8:c0:fb:ab:d2:94:ae:68:87:cb:5c:bb:
f9:2c:e3:40:04:2e:6f:28:24:13:41:b6:8c:4a:6e:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:D1:F4:B8:A9:64:EC:04:A2:AA:55:A6:AF:0B:BA:9E:11:41:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F9908626FA211F09DF8F47CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
39:5b:f3:2a:a0:12:c7:1d:42:96:f5:e2:fe:22:44:09:f0:1b:
17:c4:53:e1:70:cb:c1:00:f5:e6:5a:e4:c3:4d:d8:b1:b5:fa:
fe:40:1b:d6:bf:41:58:4a:1e:b1:0f:68:e6:03:77:da:73:9d:
9b:c5:b3:cf:0b:27:db:c9:56:30:f1:f0:ef:5c:69:8d:f9:62:
1c:3c:5d:bc:96:04:80:31:2c:00:c5:1b:0f:d0:1f:2b:dc:98:
fd:44:00:85:6f:51:cd:01:97:14:39:5c:e5:7a:77:2d:c7:4c:
81:04:d8:12:c4:b6:d6:99:55:ab:81:c9:d5:f2:ec:ab:b8:86:
56:7b:8a:35:f1:7c:28:1a:2c:c9:cd:7c:a6:c8:15:98:e0:f1:
c9:63:4e:a9:ff:ab:5a:28:3f:64:02:19:8e:5b:fb:3f:85:aa:
4a:0b:33:00:34:8f:2f:bb:6d:b0:77:a6:f8:ea:7c:d2:4b:60:
46:dd:1a:77:1e:29:c7:b9:90:f7:20:a8:9f:ca:57:04:f4:27:
97:33:83:85:58:b6:c5:66:29:73:6b:19:b7:f8:4b:70:15:83:
e3:fa:51:56:b3:f7:6b:73:c7:ad:0f:3a:a4:34:3e:a2:bb:5d:
d6:d2:57:ff:55:92:08:f8:84:e2:61:6e:c1:83:0e:38:89:71:
39:79:e4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:17 2025 by rpki-client